CVE-2024-24919 Information disclosure

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available...

CVE-2024-24919 Information disclosure

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available...

CVE-2024-24919

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available. Recent assessments: remmons-r7 at May 30...

VulnCheck KEV: CVE-2024-24919

Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several...

IRZ Mobile Routers Cross-Site Request Forgery (CVE-2022-27226)

A CSRF issue in /api/crontab on iRZ Mobile Routers through 20.6.1 allows a threat actor to create a crontab entry in the router administration panel. The cronjob will consequently execute the entry on the threat actor's defined interval, leading to remote code execution, allowing the threat actor...

mobile-university-anmeldung.de Cross Site Scripting vulnerability OBB-3930407

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

UBUNTU-CVE-2023-52880

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: require CAPNETADMIN to attach NGSM0710 ldisc Any unprivileged user can attach NGSM0710 ldisc, but it requires CAPNETADMIN to create a GSM network anyway. Require initial namespace CAPNETADMIN to do that...

The vulnerability of Microsoft Intune Mobile Application Management for Android, related to access control deficiencies, allows a malicious individual to gain unauthorized access to protected information based on the privileges of the target device.

The vulnerability of Microsoft Intune Mobile Application Management for Android relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information based on privileges of the target device...

CVE-2024-32988

The CVE covers the OfferBox Android apps (2.0.0–2.3.17) and iOS apps (2.1.7–2.6.14) that embed a hard-coded JWT secret in the binary, enabling retrieval by reverse engineering. The root cause is a hard-coded secret key used for JWT authentication, which poses confidentiality risk if extracted. Pu...

Ivanti Endpoint Manager Mobile 安全漏洞

Ivanti Endpoint Manager Mobile Ivanti EPMM is a mobile management software engine from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Endpoint Manager Mobile prior to version 12.1.0.0, which stems from a local elevation of privilege vulnerability that allows an authenticated...

Ivanti Endpoint Manager Mobile 安全漏洞

Ivanti Endpoint Manager Mobile Ivanti EPMM is a mobile management software engine from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Endpoint Manager Mobile EPMM versions prior to 12.1.0.0, which originates from an SQL injection in the web component that allows an authenticat...

Ivanti Endpoint Manager Mobile 安全漏洞

Ivanti Endpoint Manager Mobile Ivanti EPMM is a mobile management software engine from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Endpoint Manager Mobile EPMM versions prior to 12.1.0.0, which originates from an SQL injection in the web component that allows an authenticat...

CVE-2024-4988

The mobile application com.transsion.videocallenhancer interface has improper permission control, which can lead to the risk of private file leakage...

CVE-2024-4988 Improper permission control in com.transsion.videocallenhancer

The mobile application com.transsion.videocallenhancer interface has improper permission control, which can lead to the risk of private file leakage...

CVE-2024-4988 Improper permission control in com.transsion.videocallenhancer

The mobile application com.transsion.videocallenhancer interface has improper permission control, which can lead to the risk of private file leakage...

CVE-2024-4988

The CVE-2024-4988 entry concerns the mobile app com.transsion.videocallenhancer, where improper permission control in the app interface can lead to private file leakage. Red Hat/NVD/CVE references align on a vulnerability in the Transsion TECNO mobile software stack, with public detail indicating...

The vulnerability of the Windows Mobile Broadband Driver allows a hacker to execute arbitrary code.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

PT-2024-11290 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the Linux kernel, where the MHI Mobile Host Interface core does not properly validate channel IDs when processing command completions. This could lead to out-of-boun...

The vulnerability of the Windows Mobile Broadband Driver allows a hacker to execute arbitrary code.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Windows Mobile Broadband Driver allows a hacker to execute arbitrary code.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code...